Static task
static1
Behavioral task
behavioral1
Sample
c8eccb0ac9c28afc0ec9fd52fe4b99e4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c8eccb0ac9c28afc0ec9fd52fe4b99e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8eccb0ac9c28afc0ec9fd52fe4b99e4_JaffaCakes118
-
Size
2.0MB
-
MD5
c8eccb0ac9c28afc0ec9fd52fe4b99e4
-
SHA1
d551ecddff7c5149f18d8c9d2dc3bb24bc8bb6b4
-
SHA256
e7683f20547f566e3ff314701a586aa74a1556a02df2fdfc66106a0b2ef9e13e
-
SHA512
d01209e52335ad80573628002e232758ddf1785a8bdbec7c95cb4227ca57dc0d62f558b5f3fb1a605624051a80eb746af6eb7f96b575a5a2f62d2f0555072d7d
-
SSDEEP
24576:bPT4chRUPhjqEWlvkQ6pS1nxYi04tyYo/8QFE:bPvhRUYECA6yYoF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8eccb0ac9c28afc0ec9fd52fe4b99e4_JaffaCakes118
Files
-
c8eccb0ac9c28afc0ec9fd52fe4b99e4_JaffaCakes118.exe windows:5 windows x86 arch:x86
266a81c55a1f6c5927bc4f92e5a747c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegEnumKeyExW
opengl32
glTexParameteri
glBlendFunc
glClear
glClearColor
glClearDepth
glColorMask
glCopyTexImage2D
glCopyTexSubImage2D
glDeleteTextures
glDepthMask
glDrawArrays
glDrawElements
glEnable
glGenTextures
glGetError
glGetFloatv
glGetIntegerv
glGetString
glIsEnabled
glPixelStorei
glStencilMask
glStencilOp
glBindTexture
comdlg32
FindTextW
user32
RegisterClassW
CreateWindowExW
IsWindow
IsChild
ShowOwnedPopups
MoveWindow
SetDlgItemTextW
CharUpperW
CreatePopupMenu
DeleteMenu
GetMenuDefaultItem
DrawTextW
GetDCEx
BeginPaint
InvalidateRect
GetClientRect
GetWindowRect
EqualRect
PtInRect
LoadIconW
DdeCreateDataHandle
DrawEdge
kernel32
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsDebuggerPresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TerminateProcess
GetCurrentProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualAlloc
GetLastError
InitializeCriticalSectionAndSpinCount
SetEndOfFile
SetFilePointer
GetCommModemStatus
GetSystemInfo
FormatMessageW
TlsAlloc
CreateMutexW
CreateEventW
LoadLibraryW
GetModuleFileNameW
OutputDebugStringW
EnumResourceNamesW
GetDiskFreeSpaceW
CreateFileW
FindNextFileW
WaitNamedPipeW
MapViewOfFileEx
VerifyVersionInfoW
IsValidCodePage
WideCharToMultiByte
CompareStringW
EnumSystemGeoID
GetConsoleWindow
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
winscard
SCardGetStatusChangeW
Sections
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 759KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.4y32 Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rs2e Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8l9a4 Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asim Size: 419KB - Virtual size: 418KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ